Sub-processors
Last updated: 19 May 2026
This page lists the third-party service providers (“sub-processors”) that bessmo uses to deliver its service, along with where each one processes data and the applicable cross-border transfer mechanism. The same list, with full contractual wording, appears as Annex III of our Data Processing Agreement.
Each sub-processor is bound by a written contract that imposes data-protection obligations equivalent to those bessmo undertakes towards its customers. bessmo remains responsible for the performance of every sub-processor on this list.
Current list
| Sub-processor | Service provided | Location | Transfer mechanism |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud infrastructure (hosting, storage, database, compute) for the production environment. | European Union (Ireland and/or Frankfurt regions). | N/A — within EU. |
| Hetzner Online GmbH | Cloud hosting for the marketing website (www.bessmo.com) and the staging environment (app.bessmo.com). | European Union (Germany / Finland). | N/A — within EU. |
| Web3Forms | Processing of contact-form submissions on www.bessmo.com, including name, email, company and message you provide. | European Union. | N/A — within EU. |
| Functional Software, Inc. (Sentry) | Application error and crash monitoring. Processes IP addresses, user agents and limited account identifiers contained in error reports; bessmo's configuration disables default PII capture. bessmo's Sentry organisation is set to the EU data-storage region. | European Union. | N/A — within EU. |
| GitHub, Inc. | Source-code hosting and engineering workflow. May incidentally process personal data included in commit metadata or internal issues. No customer or visitor data is intentionally stored on GitHub. | United States (with EU storage options available). | EU-US Data Privacy Framework and EU Commission Standard Contractual Clauses. |
Billing
Billing is currently invoice-based. No third-party payment processor handles payment data on bessmo’s behalf. A payment processor will be added to this list, with at least thirty (30) days’ advance written notice to customers under the DPA, when card-based billing is introduced.
Changes to this list
bessmo will notify customers in writing at least thirty (30) days before adding or replacing a sub-processor that handles Customer Data on bessmo’s behalf, in accordance with Clause 7.7 of the DPA. Customers who object to a proposed change have the rights set out in the DPA.
To receive sub-processor change notifications, or to ask any other question about this list, contact contact@bessmo.com.